Method and apparatus for dynamic protection of static and dynamic content

• US 8,832,852 B2
• Filed: 04/30/2003
• Issued: 09/09/2014
• Est. Priority Date: 08/28/2000
• Status: Active Grant

• Current Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Original Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Inventors: Raley, Michael, Chen, Daniel, Wu, Hsi-Cheng, Ta, Thanh
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): Nobahar, Abdulhakim
• Application Number:
  US10/425,941
• Publication Number:
  US 20030204753A1
• Time in Patent Office: 4,150 Days
• Field of Search: None
• US Class Current: 726/28
• CPC Class Codes: G06F 21/1063 Personalisation
• CPC Class Codes: G06F 21/1083 Partial license transfers
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/62 Establishing a time schedule for servicing the requests
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context
• CPC Class Codes: H04N 21/4788 communicating with other users, e.g. chatting arrangements for providing for computer conferences, e.g. chat rooms, to substation in data switching networks H04L12/1813; distributed application using peer-to-peer [P2P] networks H04L67/104
• CPC Class Codes: H04N 21/632 using a connection between clients on a wide area network, e.g. setting up a peer-to-peer communication via Internet for retrieving video segments from the hard-disk of other client devices broadcast-related systems characterised by transmission among terminal devices H04H60/80; distributed application using peer-to-peer [P2P] networks H04L67/104

Abstract

A method and apparatus for dynamically protecting content in a system for managing use of the content in accordance with usage rights. A request is received from a user device for content stored on a server. Information is gathered from at least one source to build the content in accordance with the request and the content is mapped to usage rights. A reply including the usage rights is sent to the user device, and use of the content is permitted based on the usage rights under control of a security module for enforcing usage rights.

Claims

1. A computer-implemented method executed by one or more computing devices for protecting dynamic content in a system for managing use of the content in accordance with usage rights associated with the content, the method comprising:

receiving, by at least one of the one or more computing devices, a request from a user device associated with a content consumer for access to content that dynamically changes, wherein the content is stored on a server;

determining, by at least one of the one or more computing devices, where the request for access to the content comes from;

gathering, by at least one of the one or more computing devices, information from at least one source to build the content in accordance with the request;

mapping, by at least one of the one or more computing devices, the content to one or more usage rights, wherein at least one of the one or more usage rights is selected based at least in part on the characteristics of the request and the determination of where the request for access to the content came from;

sending, by at least one of the one or more computing devices, a reply including at least one of the one or more usage rights to the user device associated with the content consumer; and

permitting, by at least one of the one or more computing devices, use of the content based on at least one of the one or more usage rights under control of a security module for enforcing usage rights.

2. The method of claim 1, wherein the permitting step comprises sending the content to the user device associated with the content consumer and rendering the content with a rendering engine of the user device associated with the content consumer under control of a user device component of the security module.

3. The method of claim 1, further comprising establishing a subdirectory that corresponds to a location of the content on the server.

4. The method of claim 1, further comprising determining a Web page comprising a pointer to a location of the content on the server and wherein the sending step comprises returning the Web page.

5. The method of claim 1, wherein the at least one source comprises static and dynamic sources of content.

6. The method of claim 1, wherein the mapping step is accomplished using at least one of a Web page, uniform resource locator, and an internet protocol address of the user device associated with the content consumer.

7. The method of claim 1, wherein the mapping step comprises dynamically determining at least one of the one or more usage rights upon receipt of the request.

8. The method of claim 2, wherein the security module decrypts and enforces at least one of the one or more usage rights.

9. The method of claim 2, wherein if the security module is not present, rendering of the content is prohibited.

10. An apparatus for protecting dynamic content in a system for managing use of the content in accordance with usage rights associated with the content, the apparatus comprising:

one or more processors; and

one or more memories operatively coupled to at least one of the one or more processors and having instructions stored thereon that, when executed by at least one of the one or more processors, cause at least one of the one or more processors to;

receive a request from a user device associated with a content consumer for access to content that dynamically changes, wherein the content is stored on a server;

gather information from at least one source to build the content in accordance with the request;

determine where the request for access to the content comes from;

map the content to one or more usage rights, wherein at least one of the one or more usage rights is selected based at least in part on the characteristics of the request and the determination of where the request for access to the content came from;

send a reply including at least one of the one or more usage rights to the user device associated with the content consumer; and

permit use of the content based on at least one of the one or more usage rights under control of a security module for enforcing usage rights.

11. The apparatus of claim 10, wherein the instructions that cause at least one of the one or more processors to permit use of the content further cause at least one of the one or more processors to send the content to the user device associated with the content consumer and render the content with a rendering engine of the user device associated with the content consumer under control of a user device component of the security module.

12. The apparatus of claim 10, wherein at least one of the one or more memories has instructions stored thereon that, when executed by at least one of the one or more processors, cause at least one of the one or more processors to establish a subdirectory that corresponds to a location of the content on the server.

13. The apparatus of claim 10, wherein at least one of the one or more memories has instructions stored thereon that, when executed by at least one of the one or more processors, cause at least one of the one or more processors to determine a Web page comprising a pointer to a location of the content on the server and return the Web page.

14. The apparatus of claim 10, wherein the at least one source comprises static and dynamic sources of content.

15. The apparatus of claim 10, wherein the instructions that cause at least one of the one or more processors to map the content further cause at least one of the one or more processors to use at least one of a Web page, uniform resource locator, and an internet protocol address of the user device associated with the content consumer.

16. The apparatus of claim 10, wherein the instructions that cause at least one of the one or more processors to map the content further cause at least one of the one or more processors to dynamically determine at least one of the one or more usage rights upon receipt of the request.

17. The apparatus of claim 11, wherein the security module decrypts and enforces the usage rights.

18. The apparatus of claim 11, wherein if the security module is not present, rendering of the content is prohibited.

19. A computer-implemented method executed by one or more computing devices for protecting dynamic content in a system for managing use of the content in accordance with usage rights associated with the content, the method comprising:

storing, by at least one of the one or more computing devices, content on a server;

identifying, by at least one of the one or more computing devices, one or more requests for access to the content;

mapping, by at least one of the one or more computing devices, one or more usage rights to at least one of the identified requests;

modifying, by at least one of the one or more computing devices, the content on the server;

receiving, by at least one of the one or more computing devices, a request from a user device associated with a content consumer for access to the modified content;

determining, by at least one of the one or more computing devices, where the request for access to the content comes from;

gathering, by at least one of the one or more computing devices, information from at least one source to build a response content in accordance with the request;

mapping, by at least one of the one or more computing devices, the response content to at least one of the one or more usage rights, wherein the at least one of the one or more usage rights is selected based at least in part on the characteristics of the request, the determination of where the request for access to the content came from, and on the mapping of the one or more usage rights to the at least one identified request;

sending, by at least one of the one or more computing devices, a reply including at least one of the one or more usage rights to the user device associated with the content consumer; and

permitting, by at least one of the one or more computing devices, use of the content based on at least one of the one or more usage rights under control of a security module for enforcing usage rights.

20. The method of claim 19, wherein the permitting step comprises sending the content to the user device associated with the content consumer and rendering the content with a rendering engine of the user device associated with the content consumer under control of a user device component of the security module.

21. The method of claim 19, further comprising establishing a subdirectory that corresponds to a location of the content on the server.

22. The method of claim 19, further comprising determining a Web page comprising a pointer to a location of the content on the server and wherein the sending step comprises returning the Web page.

23. The method of claim 19, wherein the at least one source comprises static and dynamic sources of content.

24. The method of claim 19, wherein the step of mapping the response content is accomplished using at least one of a Web page, uniform resource locator, and an internet protocol address of the user device associated with the content consumer.

25. The method of claim 19, wherein the step of mapping the response content comprises dynamically determining at least one of the one or more usage rights upon receipt of the request.

26. The method of claim 20, wherein the security module decrypts and enforces at least one of the one or more usage rights.

27. The method of claim 20, wherein if the security module is not present, rendering of the content is prohibited.

28. At least one non-transitory computer-readable medium storing computer-readable instructions that, when executed by one or more computing devices, cause at least one of the one or more computing devices to:

receive a request from a user device associated with a content consumer for access to content that dynamically changes, wherein the content is stored on a server;

gather information from at least one source to build the content in accordance with the request;

determine where the request for access to the content comes from;

map the content to one or more usage rights, wherein at least one of the one or more usage rights is selected based at least in part on the characteristics of the request and the determination of where the request for access to the content came from;

send a reply including at least one of the one or more usage rights to the user device associated with a content consumer; and

permit use of the content based on at least one of the one or more usage rights under control of a security module for enforcing usage rights.

29. The at least one non-transitory computer-readable medium of claim 28, wherein the instructions that cause at least one of the one or more computing device to permit use of the content further cause at least one of the one or more computing devices to send the content to the user device associated with the content consumer and render the content with a rendering engine of the user device associated with the content consumer under control of a user device component of the security module.

30. The at least one non-transitory computer-readable medium of claim 28, further storing computer-readable instructions that, when executed by one or more computing devices, cause at least one of the one or more computing devices to establish a subdirectory that corresponds to a location of the content on the server.

31. The at least one non-transitory computer-readable medium of claim 28, further storing computer-readable instructions that, when executed by one or more computing devices, cause at least one of the one or more computing devices to determine a Web page comprising a pointer to a location of the content on the server and return the Web page.

32. The at least one non-transitory computer-readable medium of claim 28, wherein the at least one source comprises static and dynamic sources of content.

33. The at least one non-transitory computer-readable medium of claim 28, wherein the instructions that cause at least one of the one or more computing devices to map the content further cause at least one of the one or more computing device to use at least one of a Web page, uniform resource locator, and an internet protocol address of the user device associated with the content consumer.

34. The at least one non-transitory computer-readable medium of claim 28, wherein the instructions that cause at least one of the one or more computing devices to map the content further cause at least one of the one or more computing devices to dynamically determine at least one of the one or more usage rights upon receipt of the request.

35. The at least one non-transitory computer-readable medium of claim 29, wherein the security module decrypts and enforces at least one of the one or more usage rights.

36. The at least one non-transitory computer-readable medium of claim 29, wherein if the security module is not present, rendering of the content is prohibited.